Risk Management Framework Specialist (Onsite)

Geospatial Consulting Group International (geocgi); St. Louis (MO); On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Medical, Dental, and Vision coverage

Bonuses

Safe Harbor 401(k) with vesting

Flexible work hours and PTO

Professional growth and certifications

Job summary

geo cgi seeks an experienced Risk Management Framework Specialist to oversee RMF for the USAF program at Scott Air Force Base, Illinois. Responsibilities include implementing RMF for DoD systems on AWS, preparing ATOs, and guiding staff.

The role requires TS/SCI eligibility, a Bachelor's in cybersecurity/IT, 5+ years in cybersecurity with 3+ in RMF, proficiency with eMASS and vulnerability scanners, and strong communication. Competitive benefits and growth opportunities.

Qualifications

• US Citizen with a DoD Top Secret/SCI clearance or ability to obtain and maintain.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer systems or related field.
• 5+ years of hands-on experience in Cybersecurity with a minimum of 3 years specializing in RMF processes and DoD information systems.
• Proficiency with RMF tools such as eMASS and vulnerability scanners (Nessus, ACAS, SCAP).
• Strong verbal and written communication skills for technical and non-technical audiences.
• Proficiency with Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).

Responsibilities

• Lead the implementation of RMF for DoD information systems, ensuring compliance with DoD and USAF cybersecurity policies.
• Conduct security control assessments and validate the effectiveness of controls.
• Perform risk assessments to identify vulnerabilities and recommend mitigations.
• Prepare and maintain RMF documentation (SSPs, POA&Ms, Risk Assessment Reports).
• Implement and manage continuous monitoring for ongoing ATOs.
• Collaborate with system owners, developers, and stakeholders to integrate security requirements throughout the SDLC.
• Support internal and external audits and inspections.
• Ensure alignment with Air Force cybersecurity policies and recommend updates as needed.
• Mentor and train junior staff on RMF tasks and DoD standards.

Skills

RMF

eMASS

NIST SP 800-37/53/171

Clearance

MS Office

Communication

Education

Bachelor's degree in Cybersecurity/IT

Tools

eMASS

Nessus

ACAS

SCAP

Job description

Client: USAF, Air Mobility Command

Work Location: Scott Airforce Base, Belleville, Illinois

Reporting Hours: Onsite M-F, Central Standard Time

Clearance: Active DoD Secret Clearance with the ability to obtain Top Secret or TS/SCI

Travel: None at this time

** **

geo cgi is seeking an experienced Risk Management Framework Specialist to oversee and manage cybersecurity processes and ensuring compliance for the United States Air Force Program at Scott Air Force Base, Illinois (St. Louis area). The Risk Management Framework Specialist is responsible for implementing and maintaining the RMS process within the organization, specifically for systems and applications deployed on Amazon Web Services (AWS) cloud infrastructure. The Risk Management Framework Manager/Specialist will also be responsible for preparing and maintaining Authority to Operate (ATO) documents, as well as providing guidance and training to other members of the organization on RMF-related matters. This position’s location is at U.S. Scott Air Force Base in Illinois (St. Louis area- Belleville, Illinois).

Key Responsibilities:

• Lead the implementation of the Risk Management Framework (RMF) for the U.S. Air Force information systems, ensuring compliance with Department of Defense (DoD) and U.S. Air Force cybersecurity polities.
• Conduct security control assessments and validate the effectiveness of implemented controls for information systems.
• Perform risk assessments to identify vulnerabilities, threats and risks to information systems and recommend appropriate mitigation strategies for implementation and hardening.
• Prepare and maintain Risk Management Framework documentation including but not limited to System Security Plans (SPPs), Plan of Action and Milestones (POA&Ms) and Risk Assessment Reports.
• Implement and manage continuous monitoring strategies to ensure ongoing assessment and authorization of information systems.
• Work closely with system owners, developers, and other stakeholders to ensure security requirements are integrated throughout the system development lifecycle.
• Support internal and external audits, reviews, and inspections related to information system security.
• Ensure alignment with current Air Force cybersecurity policies, standards, and regulations, and recommend updates to cybersecurity policies as needed.
• Mentor and guide junior staff in performing these tasks, providing training and support to enhance their skills and ensure adherence to best practices and U.S. Air Force standards.

As an employee of geo cgi, the Risk Management Framework Specialist will have access to a generous benefits package, in addition to a corporate culture and community of GIS geeks. Our benefits include but are not limited to:

• Competitive salaries, commensurate with experience and leading Federal Contractors in the geospatial industry.
• Opportunities for upward mobility in a dynamic fast paced environment within a small company.
• Merit-based spot and end of year bonuses.
• Safe Harbor 401(k) plan with immediate vesting.
• Flexible work hours and PTO.
• Complete Medical, Dental, and Vision coverage for individuals.
• Company paid training, certifications, and professional growth and development.

Requirements

• US Citizen with a DoD Top Secret/SCI Clearance or ability to obtain and maintain.
• Minimum of a Bachelor’s degree in Cybersecurity, Information Technology, Computer system or related field.
• 5+ years of hands-on experience in Cybersecurity with a minimum of 3 years specializing in Risk Management Framework processes and DoD information systems
• Proficiency in Risk Management Framework tools and technologies, such as eMASS (Enterprise Mission Assurance Support Service) and vulnerability assessment tools (e.g., Nessus, ACAS, SCAP).
• In-depth knowledge of NIST Special Publications (SP) 800-37, 800-53, and 800-171, as well as DoD Instruction 8510.01 and related guidelines.
• Excellent verbal and written communication skills, with the ability to clearly explain complex cybersecurity concepts to both technical and non-technical audiences.
• Skilled in communicating effectively with military command staff, contractors, and civilians, ensuring clear and concise information exchange across diverse groups and stakeholders.
• Ability to manage multiple projects, meet deadlines, and work both independently and collaboratively, with a passion for location-based problem-solving to support business and mission-critical challenges.
• Proficient with Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).

Preferred

• CompTIA Security+ Certification.
• Certified Information Systems Security Professional (CISSP).
• Certified Authorization Professional (CAP).

The annual base salary range for this position is anticipated to be $80,000 - $100,000 USD. The listed salary range represents our good faith estimate for this position. Please note that the salary information is a general guideline only. geo cgi considers factors such as (but not limited to) scope and responsibilities of the position, candidate’s education & work experience, training & certifications, and key skills as well as market and business considerations at the time of the offer.

geo cgi provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.